commit-sentinel
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- COMMAND_EXECUTION (HIGH): The skill instructs the agent to execute
bun run lintandbun teston local repository files. This execution environment can be exploited if repository configuration files or test scripts are maliciously modified. - EXTERNAL_DOWNLOADS (LOW): Recommends the use of
bun x tscto execute the TypeScript compiler. This involves fetching packages from a public registry. Whiletscis a standard tool, it is flagged as a potential vector for tool spoofing; however, severity is downgraded per TRUST-SCOPE-RULE. - PROMPT_INJECTION (HIGH): The skill is susceptible to Indirect Prompt Injection through repository content. 1. Ingestion points: Analyzes
git diffoutput and project source code. 2. Boundary markers: None; the skill does not specify how to distinguish between instructions and data in the repository. 3. Capability inventory: High privilege subprocess execution (bun,git) and repository modification (git commit,git rebase). 4. Sanitization: None. - DYNAMIC_EXECUTION (MEDIUM): Utilizes
git bisect runto automate execution ofbun testacross repository history. This creates a loop where code from various historical states is executed automatically.
Recommendations
- AI detected serious security threats
Audit Metadata